AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
We re-ran our MCP scanner comparison on 14,933 npm and PyPI tool lists, in gVisor, with two more scanners
A week ago we ran three MCP security scanners on a tool-poisoning benchmark and 986 real servers. Th…
InboxWall: How a Local-First MCP Server Sanitizes Email HTML to Stop Prompt Injection Before the LLM Sees It
Email is a hostile data source. When you give an AI agent access to your inbox, you hand it HTML tha…
Your Secure Element Was Never The Target
The Ledger implant heist didn't break crypto. It bypassed it entirely by watching the screen. Every…
BAE Systems Incident Takes Down the Federal Bankruptcy Notice System: When the Contractor Is the Court's Single Point of Failure
TL;DR what: The Administrative Office of the US Courts (AOUSC) said a cyberattack on government …
An Agent's Own Log Is Not an Audit Trail. A New Paper Shows Agents Deleting Theirs
Book: LLM Observability Pocket Guide Also by me: Thinking in Go (2-book series) — Complete Guide t…
CVE-2026-89069: cross-site scripting in the MOVEit Transfer Ad Hoc module
CVE-2026-89069: cross-site scripting in the MOVEit Transfer Ad Hoc module An 8.0 severity rating f…
Governance Attack Surface Review: ether.fi Stake
Governance Attack Surface Review: ether.fi Stake Target Protocol: ether.fi Stake (TVL: $4598.1M) …
Tracing Fraud Rings with a Graph: What I Learned Building with FalkorDB
Banks flag suspicious transactions all day. The hard part isn't the flag—it's seeing what's behind i…
Testing REA, the Viral AI Reverse Engineering Repo, Against Real Source Code
Ask a coding agent how a closed app works and it will happily explain, whether or not it actually re…
30 of 33 attack paths ran through one link: Choke Point on FalkorDB
A marketing contractor called alice.moreno clicks the wrong link. Someone on the security team now h…
Two new x402 APIs for AI agents: Trusted Types policy enforcement audit + QUIC spin-bit privacy-leak probe — cycle 164
Two new x402 APIs: Trusted Types + QUIC spin-bit — cycle 164 Two new x402-paid micro-endpoints shi…
What Leaves Your Browser? A 90-Second Privacy Checklist for AI Browser Agents
P.S. If you want more privacy-first AI workflows like this one delivered to your inbox every week, j…